What’s Vulnerable › Products
Fortinet FortiOS (FortiGate) vulnerabilities
282 known vulnerabilities, 21 confirmed exploited in the wild (CISA KEV), 47 published in the last 12 months.
Check whether your Fortinet FortiOS (FortiGate) version is affected
Exploited Fortinet FortiOS (FortiGate) vulnerabilities
- CVE-2025-61624 — Fortinet Multiple Products Path Traversal Vulnerability
- CVE-2025-25249 — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- CVE-2026-24858 — Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2025-59718 — Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
- CVE-2019-6693 — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
- CVE-2025-24472 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
- CVE-2024-55591 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
- CVE-2024-23113 — Fortinet Multiple Products Format String Vulnerability
- CVE-2024-21762 — Fortinet FortiOS Out-of-Bound Write Vulnerability
- CVE-2023-27997 — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
- CVE-2022-41328 — Fortinet FortiOS Path Traversal Vulnerability
- CVE-2022-42475 — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
- CVE-2022-40684 — Fortinet Multiple Products Authentication Bypass Vulnerability
- CVE-2018-13374 — Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
- CVE-2018-13383 — Fortinet FortiOS and FortiProxy Out-of-bounds Write
- CVE-2018-13382 — Fortinet FortiOS and FortiProxy Improper Authorization
- CVE-2021-44168 — Fortinet FortiOS Arbitrary File Download
- CVE-2020-12812 — Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
- CVE-2019-5591 — Fortinet FortiOS Default Configuration Vulnerability
- CVE-2018-13379 — Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Latest Fortinet FortiOS (FortiGate) vulnerabilities
- CVE-2026-106175 — (CVSS 2.3)
- CVE-2026-84393 — (CVSS 8.1)
- CVE-2026-84392 — (CVSS 2.7)
- CVE-2026-71408 — (CVSS 5.3)
- CVE-2026-71407 — (CVSS 8.1)
- CVE-2026-59840 — (CVSS 4.3)
- CVE-2026-59839 — (CVSS 5.5)
- CVE-2026-59837 — (CVSS 6.6)
- CVE-2026-23573 — (CVSS 6.1)
- CVE-2025-62826 — (CVSS 4.3)
- CVE-2025-62675 — (CVSS 4.3)
- CVE-2025-43892 — (CVSS 4.3)
- CVE-2025-67862 — (CVSS 6.7)
- CVE-2025-53844 — (CVSS 8.8)
- CVE-2025-61624 — Fortinet Multiple Products Path Traversal Vulnerability (CVSS 6.5) — exploited
- CVE-2025-53847 — (CVSS 8.8)
- CVE-2026-22153 — (CVSS 8.1)
- CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVSS 5.9) — exploited
- CVE-2025-64157 — (CVSS 7.2)
- CVE-2025-62439 — (CVSS 4.2)
- CVE-2025-55018 — (CVSS 5.8)
- CVE-2026-25815 — (CVSS 3.2)
- CVE-2026-24858 — Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVSS 9.8) — exploited
- CVE-2025-25249 — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability (CVSS 9.8) — exploited
- CVE-2024-40593 — (CVSS 4.4)